coffeelink.schaerer.com

- WMF Group GmbH -

Issued by D-TRUST SSL Class 3 CA 1 2009

About this certificate

This digital certificate with serial number 78:aa:9d:72:d5:42:06:79:60:98:60:3e:ef:26:a8:2d was issued on by D-Trust GmbH.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

WMF Group GmbH

Company registration number: CSM018248164
Organization: WMF Group GmbH
State / Province: Baden-Wuerttemberg
Locality: Geislingen an der Steige
Country: DE

D-Trust GmbH

Organization: D-Trust GmbH
Country: DE

This certificate has expire since

Certificate Details

Serial Number (hex): 78:aa:9d:72:d5:42:06:79:60:98:60:3e:ef:26:a8:2d
Serial Number (int): 160393243396459252152954491340224636973
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId: fd:ef:9b:19:b3:ec:6a:76:50:f9:d1:ac:d5:8a:d8:66:69:e2:0d:45
AuthorityKeyId: 50:19:32:94:9a:c4:b5:04:4d:56:d0:c0:83:21:d5:35:55:b0:b1:7a

Fingerprint (sha1): 4e:ad:68:b7:72:52:fe:71:cd:bc:45:25:53:a1:2c:e2:fa:eb:27:dc
Fingerprint (sha256): 44:f2:77:c8:51:70:f8:00:bc:29:c2:80:4f:17:a3:cd:a1:2f:e7:b4:33:3b:36:c3:0b:0e:5d:de:d3:55:6d:7e

Issuing Certificate URL: http://www.d-trust.net/cgi-bin/D-TRUST_SSL_Class_3_CA_1_2009.crt
Issuing Certificate URL: ldap://directory.d-trust.net/CN=D-TRUST%20SSL%20Class%203%20CA%201%202009,O=D-Trust%20GmbH,C=DE?cACertificate?base?

Revocation information

OCSP Server: http://ssl-c3-ca1-2009.ocsp.d-trust.net
CRL Distribution Point: ldap://directory.d-trust.net/CN=D-TRUST%20SSL%20Class%203%20CA%201%202009,O=D-Trust%20GmbH,C=DE?certificaterevocationlist
CRL Distribution Point: http://crl.d-trust.net/crl/d-trust_ssl_class_3_ca_1_2009.der.crl
CRL Distribution Point: http://cdn.d-trust-cloudcrl.net/crl/d-trust_ssl_class_3_ca_1_2009.crl

Check the revocation status for certificate coffeelink.schaerer.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for coffeelink.schaerer.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

coffeelink.schaerer.com

Other certificates including the domain name schaerer.com

(limited to 100 certificates)
schaerer.com
schaerer.com
usa.schaerer.com
coffeelinkng.schaerer.com
schaerer.com
mcstaging.schaerer.com
owa.wmf.com
schaerer.com
schaerer.com
schaerer.com
schaerer.com
*.coffeelinkng.schaerer.com
*.schaerer.com
*.schaerer.com
coffelink.schaerer.com
*.coffeelinkng.schaerer.com
coffeelink.schaerer.com
usa.schaerer.com
owa.wmf.com
coffeelink.schaerer.com
schaerer.com
schaerer.com
schaerer.com
*.schaerer.com
schaerer.com
logintest.coffeelinkng.schaerer.com
logintest.coffeelinkng.schaerer.com
usa.schaerer.com
schaerer.com
usa.schaerer.com
usa.schaerer.com
time.schaerer.com
*.coffeelinkng.schaerer.com
coffeelink.schaerer.com
coffeelink.schaerer.com
schaerer.com
schaerer.com
usa.schaerer.com
usa.schaerer.com
schaerer.com
time.schaerer.com
usa.schaerer.com
*.schaerer.com
www.schaerer.com
schaerer.com
time.schaerer.com
schaerer.com
*.coffeelinkng.schaerer.com
schaerer.com
*.schaerer.com
schaerer.com
usa.schaerer.com
*.schaerer.com
usa.schaerer.com
coffeelink-int.schaerer.com
schaerer.com
login.coffeelinkng.schaerer.com
schaerer.com
*.coffeelinkng.schaerer.com
schaerer.com
coffeelink-int.schaerer.com
schaerer.com
schaerer.com

Certificate

The complete raw certificate details for coffeelink.schaerer.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 160393243396459252152954491340224636973
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'D-Trust GmbH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'D-TRUST SSL Class 3 CA 1 2009'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-02-05 13:08:08 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-02-08 13:08:08 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CSM018248164'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Baden-Wuerttemberg'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Geislingen an der Steige'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'WMF Group GmbH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'coffeelink.schaerer.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 910001651804741353089983360593833283397457763984660024063904210317707500849022555687101915632976606452396445476220199537444977036634615099043228398183495019749483395935087969581507502454311862506670727220339583816016729947698035829681377121882458849313155545532019681533110305983431587882076646558366640204198364694156635744101714737260304714995706971250650582209227403710260800876264482370645993573814223288284759994154005730388627136781971032739860001787699661683318559509409317306314541089346479474913567624401764312452309213330380059425646355787538529314189991091197105340196898563744314141491800972729728244080591209930497817968864133354962414869093436008981976874554691138993319447222904764179539900584702259691913806098682824138522345965487003691522442028553215691885849015678576043203901564298253139269267177704425389566802654175569508770969367033902692653305837585605722988543093607734655169855187928549443055826027543478947502857555524051568296314378160023207984648371929820897796909517438267783429425035963297432118716983402276208199084462442981947026754023365848803308363787036823627629006995510239096992542856719805768121366214471480380802451914788220072673810077688380512822649119816734416512243987613852902576009129707
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (264 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ssl-c3-ca1-2009.ocsp.d-trust.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://www.d-trust.net/cgi-bin/D-TRUST_SSL_Class_3_CA_1_2009.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'ldap://directory.d-trust.net/CN=D-TRUST%20SSL%20Class%203%20CA%201%202009,O=D-Trust%20GmbH,C=DE?cACertificate?base?'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (104 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4788.2.200.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.d-trust.net/internet/files/D-TRUST_CSM_PKI_CPS.pdf'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 0.4.0.2042.1.7
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1330 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1326 bytes)
							052c0077005cdc4392fee6ab4544b15e9ad456e61037fbd5fa47dca17394b25ee6f6c70eca000001701577133400000403004830460221009f10054618325f672cf600d194a3feca87f44151ec77a39baf5ec5a1753be627022100b823194fe21118c0d4bc9342255fd781ca799ac78857cf3f0837e3a430f269260076005614069a2fd7c2ecd3f5e1bd44b23ec74676b9bc99115cc0ef949855d689d0dd00000170157711b6000004030047304502204af3c9c39f3a87bec8e717e75c9fca82ec56ea61450c9fa807bfe23e19c0c7b2022100e794512ee89b8ee75a0342b70164eb481483df8169f3ed6ffffd63c8c757569b007700ee4bbdb775ce60bae142691fabe19e66a30f7e5fb072d88300c47b897aa8fdcb0000017015770ef00000040300483046022100b9dc49996e085ec184d32e74f51aa74b7df6d39519ed24cacd5429276d1f0262022100e3e09acf7f938c58badd4867a170b20b4627aa3f48183353ed29bc456c06ef8f0076005581d4c2169036014aea0b9b573c53f0c0e43878702508172fa3aa1d0713d30c00000170157711d40000040300473045022100c34e198c42ddf7b95eb97c7771800fbff4f084f06efcc489c142774e89ddbc53022032f8bc4b4f4dbf5e9f25447a083d85ac3bcd425c79156345869d4639e1020711007600a4b90990b418581487bb13a2cc67700a3c359804f91bdfb8e377cd0ec80ddc10000001701577108a0000040300473045022009d3ba58b3c9b1679330c55cb137395ab805af937a69071b1f6157357433f537022100b078656cfff870be28ee1e315b0241fe732cf9c5db14a81e93632a39e8c72161007600bbd9dfbc1f8a71b593942397aa927b473857950aab52e81a909664368e1ed1850000017015771202000004030047304502203d6c3f1fa8b241c796b9ca3a51e17df3cf88d49542aea4a13661071dacbf8e92022100c2273f8fe1b2bf60ec5d0f939d22e3abc001d915b84bde0b5397071875b464680076006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d91300000170157712980000040300473045022100f3c6f28d7be2d47ccb0bb34fe4c16b53a3f11559b8e2b1843e3e4b65be03e48702204e46ca1f776f4253326728d4781f998a10dd268b58ffeb5fd0758a0b11b28bfa007700eec095ee8d72640f92e3c3b91bc712a3696a097b4b6a1a1438e647b2cbedc5f900000170157714580000040300483046022100e86b6b3c8fbc60933c3a60a69eb2667913c23aba85eb445177cd31a6d591772c0221009d3fc5195471a5b42f798ff7a64468f52b30cb05c1c90b3c743deb2c2d85f0d60076007d3ef2f88fff88556824c2c0ca9e5289792bc50e78097f2e6a9768997e22f0d700000170157713050000040300473045022100c30296498719035fd0de79a36e30af8a5e4b723203a740b34b05454265318e8b02203fe932650ab4dd717ba90cb724e5c122ca642e8886e3795e6028c68f41b6a6100077004494652eb0eeceafc44007d8a8fe28c0dae682bed8cb31b53fd33396b5b681a800000170157715f70000040300483046022100db3f59669448ebd4b43140c27b904dd2023e4da526aeaaf666d01089a05f56e1022100e9cd21f13202162df2f274429e678de41af355294f1851385d8fabe3519b9fd1007600f65c942fd1773022145418083094568ee34d131933bfdf0c2f200bcc4ef164e300000170157714110000040300473045022100dd343e7c1eb101bb85fbf34af403900c9ec9e3f81df07e73b854b025bfefe9c102200d65d4fc9f7c55c9433dcd74361067696302d90bdfeac1151f9a2babdc9a2d34
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.18 (issuerAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:1|false] IA5String '[email protected]'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://www.d-trust.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (276 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'ldap://directory.d-trust.net/CN=D-TRUST%20SSL%20Class%203%20CA%201%202009,O=D-Trust%20GmbH,C=DE?certificaterevocationlist'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.d-trust.net/crl/d-trust_ssl_class_3_ca_1_2009.der.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdn.d-trust-cloudcrl.net/crl/d-trust_ssl_class_3_ca_1_2009.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (27 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'coffeelink.schaerer.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 501932949ac4b5044d56d0c08321d53555b0b17a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							fdef9b19b3ec6a7650f9d1acd58ad86669e20d45
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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